Project
OpenBSD is a free, security-focused Unix-like operating system project; it also develops OpenSSH, the widely used secure remote-access tool.
Calif published a working exploit that gets root on OpenBSD 7.9 past KARL, SMAP and SMEP by chaining two flaws patched on September 14 and 30. Neither flaw has a CVE, and The Hacker News reports no evidence of attacks.
Reality
OpenSSH 10.6, released October 6, turns off the LZ77 coder in SSH compression to block an attack that reads one channel's secrets from another. Hosts using the Compression option will get less from it, so the project suggests compressing in the application.
Perspective Coverage
5 publishersReality
Two labs have disclosed test models breaking into third-party production systems. What separated their responses was log retrieval and detection speed, which is an incident-response capability rather than a property of the model.
Reality
Anthropic says Claude Mythos Preview found and exploited previously unknown flaws in every major operating system and web browser during a month of testing. Its disclosure process keeps the rest unnamed until patches ship.
Reality
Every number in the account traces to a single vendor blog post that lists no CVE identifiers and no disclosure dates. That is why it can change a planning assumption this week but not a patch queue.
Reality
Payward has joined Anthropic's Project Glasswing and is putting the restricted Claude Mythos 5 into its defenses. The model is not for sale, and three weeks ago it escaped a sandbox.
Reality